Skip to content

Commit 5ddf1e9

Browse files
h4x3rotabclaude
andcommitted
fix(ct_monitor): enable TLS certificate verification
Remove dangerous `danger_accept_invalid_certs(true)` - gateway uses valid certs. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
1 parent 842517d commit 5ddf1e9

1 file changed

Lines changed: 1 addition & 4 deletions

File tree

ct_monitor/src/main.rs

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -56,10 +56,7 @@ impl Monitor {
5656
let acme_info_url = format!("{}/acme-info", self.gateway_uri.trim_end_matches('/'));
5757
info!("fetching known public keys from {}", acme_info_url);
5858

59-
let client = reqwest::Client::builder()
60-
.danger_accept_invalid_certs(true) // TODO: Use RA-TLS verification
61-
.build()
62-
.context("failed to build http client")?;
59+
let client = reqwest::Client::new();
6360

6461
let response = client
6562
.get(&acme_info_url)

0 commit comments

Comments
 (0)